-
Hi Mohamed Ben Abdeljelil,
Thanks for the feedback.
You’ve raised a fair point about the limitations of what Network Watcher’s Connection Troubleshoot can reveal, and you’re absolutely right that it doesn’t explicitly show NSG associations. However, in the context of this scenario, which is designed to simulate an exam-style question, the goal is to assess your ability to infer the most likely configuration based on the clues provided, not to confirm every detail with full diagnostic output.
The scenario clearly states that TDNSG1 was created and configured with inbound rules targeting 10.0.2.0/24, which is the subnet TD2 is connected to. That’s a strong indicator that TDNSG1 is intended to filter traffic to TD2. If it were associated with TD1, those rules wouldn’t apply, since the destination wouldn’t match.
Additionally, the ICMP test succeeds and the TCP 443 test fails, which aligns with the NSG allowing traffic and the fact that ICMP is explicitly allowed in TD2’s Windows firewall. These behavioral clues support the conclusion that TDNSG1 is associated with TD2.
While we understand the desire for more explicit evidence, the scenario is intentionally scoped to test reasoning based on available information. In that context, concluding that TDNSG1 is associated with TD2’s NIC or subnet is both reasonable and aligned with the configuration details provided.
Take note that there are questions in the actual Azure exam that are difficult, tricky, and ambiguous. You have to be prepared to look for specific keywords or key phrases in order to find the most suitable answer. This is the style that we are trying to mimic in our practice tests. Some of the questions do not explicitly show the obvious keywords or phrases that will easily point to the answer.
Hope this helps! Let us know if you need further assistance.
Best regards,
JR @ Tutorials Dojo
